Mastering Regular Expressions: Part 1 - Validating Emails, URLs, Credit Card Numbers, and IP Addresses

  • May 31, 2023
  • 5 min read

Hello, aspiring web developers! Today, we're going to introduce you to a potent tool you might have heard of but maybe you've been a bit too afraid to tangle with. A tool that's been whispered about in the corridors of code. That's right, folks - we're taking the veil off Regular Expressions, or as the cool kids call it, RegEx. Buckle up, because we're going on a ride into the realm of pattern matching and data validation.

A Little Bit About RegEx

For the uninitiated, Regular Expressions are a powerful way to match strings of text, such as particular characters, words, or patterns of characters. Think of RegEx as a small, highly specialized programming language embedded inside JavaScript, Python, and even in your favorite text editors!

RegEx may seem cryptic at first glance, a mishmash of slashes, brackets, and a hodgepodge of other symbols. But once you break it down, you'll find an elegant, powerful tool ready to make your coding life a little bit easier.

Regex in Action

Let's dive into a few practical use cases of RegEx - email validation, URL validation, and credit card number validation.

Email Validation

Imagine you're building a sign-up form on your website, and you want to make sure users provide a valid email address. Here is a simple RegEx for that:


This expression might look scary, but let's break it down:

  • ^ denotes the start of the line.
  • \w+ looks for one or more word characters (a-z, A-Z, 0-9, and underscore).
  • ([\.-]?\w+)* checks for zero or more instances of a period or hyphen followed by a word character.
  • @ is looking for the '@' character.
  • \w+([\.-]?\w+)* is the same as the first part but after '@', checking the domain name.
  • (\.\w{2,3})+$ checks for a period followed by two or three word characters at the end of the line.

The result is a powerful little tool that checks to see if a user has entered a valid email address.

URL Validation

When validating URLs, we want to ensure they start with http:// or https:// and contain valid domain characters. Let's use RegEx magic again:

/^(https?:\/\/)?([\da-z\.-]+)\.([a-z\.]{2,6})([\/\w \.-]*)*\/?$/

Breaking it down:

  • ^ begins the line.
  • (https?:\/\/)? checks for "http" or "https" at the start, which are optional.
  • ([\da-z\.-]+) allows any digit, character (a-z), dot, or hyphen.
  • \.([a-z\.]{2,6}) ensures there's a dot followed by 2 to 6 valid domain characters.
  • ([\/\w \.-]*)*\/? allows multiple characters, slashes, dots, and hyphens.
  • $ marks the end of the line.

With this expression, you can weed out any phony URLs that try to sneak into your website!

Credit Card Validation

We must exercise great care when dealing with credit card numbers. The standard format includes 16 digits, typically broken up into groups of 4 by spaces or hyphens. Here's a basic RegEx for this scenario:

/^(\d{4}-){3}\d{4}$|^(\d{4} ){3}\d{4}$|^\d{16}$/

This might be the most intimidating yet, but let's decode it:

  • ^ is our line start.
  • (\d{4}-){3} looks for three instances of four digits followed by a hyphen.
  • \d{4} checks for another four digits.
  • $ ends the line, and the | represents OR.
  • We repeat this pattern for groups of four digits separated by spaces, and again for sixteen continuous digits.

With this expression, you can ensure that your users provide credit card numbers in the appropriate format.

IP Address Validation

An IP address is made up of four numerical octets separated by dots ., with each octet ranging from 0 to 255. The RegEx pattern checks each of these conditions. Here's the breakdown:


An IP address is made up of four numerical octets separated by dots (.), with each octet ranging from 0 to 255. The RegEx pattern checks each of these conditions. Here's the breakdown:

  • ^ and $: These symbols indicate the start and end of the string respectively. It means the entire string must match the pattern enclosed between ^ and $.

  • (25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}: This portion checks for the first three octets of the IP address. Let's further break it down:

    • 25[0-5]: This matches any number between 250 and 255. This ensures the number doesn't go above 255.
    • 2[0-4]\d: This matches any number between 200 and 249.
    • [01]?\d\d?: This matches any number between 0 and 199. The ? makes the preceding character optional. Therefore, it can match 1, 2, 3 (single digits), 10, 20, 30 (double digits), or 100, 101, etc. (three digits).
    • \.: This matches the dot (.) separator.
    • {3}: This ensures that the preceding pattern repeats exactly three times.
  • (25[0-5]|2[0-4]\d|[01]?\d\d?): This checks for the last octet of the IP address, using the same logic as described above.

So, when combined, this RegEx checks to ensure that we have four octets, separated by dots, and each octet is a number from 0 to 255.

Remember, Regular Expressions are a powerful tool that can seem complex at first, but once you understand the underlying principles, they become an invaluable resource in your coding toolbox.


While Regular Expressions might seem scary at first, I hope this post has demystified them somewhat. Remember, they are nothing more than patterns used to match character combinations in strings. So go on, embrace the magic of RegEx, and see your web development projects flourish.

Remember, with great power comes great responsibility! Using RegEx effectively can mean the difference between a website that merely functions and a site that performs. Good luck out there, and happy coding!

This post was brought to you by the team at DevPicker, the web developer's treasure trove of information. If you've enjoyed this post and learned something new, don't forget to share it with your fellow coders!

Regular ExpressionsRegExWeb DevelopmentValidationCodingJavaScriptData ValidationEmail ValidationURL ValidationCredit Card ValidationIP Address Validation